Danish authorities are scrambling to address a security vulnerability in the country's fleet of Chinese-made electric buses, which could potentially be remotely deactivated. The issue came to light after Norway's public transport authority, Ruter, discovered that the manufacturer, Yutong, had remote access to the vehicles' control systems for software updates and diagnostics.
In an isolated test environment, Ruter found that the buses could be remotely deactivated while in transit, highlighting a significant security risk. To mitigate this issue, Ruter is implementing stricter security measures, including removing sim cards from future procurements, but these changes are unlikely to disconnect the buses from other systems.
Movia, Denmark's largest public transport company, operates 469 Chinese electric buses, with 262 manufactured by Yutong. The Danish agency for civil protection and emergency management has warned that the vehicles' internet connectivity and sensors could be exploited to disrupt bus operations, but notes that no specific cases of deactivation have been reported.
Yutong has maintained that it complies with applicable laws and regulations in the locations where its vehicles operate. However, critics argue that Denmark's dependence on Chinese companies poses a significant national security risk, particularly at a time when the country is trying to increase its resilience amid allegations of hybrid attacks by Russia.
"We have been way too slow" in addressing this issue, says Thomas Rohden, chair of the Danish China-Critical Society. "Denmark should not be so dependent on a country with values and ideals so different from our own," he added. The Norwegian government has declined to comment on the matter.
In an isolated test environment, Ruter found that the buses could be remotely deactivated while in transit, highlighting a significant security risk. To mitigate this issue, Ruter is implementing stricter security measures, including removing sim cards from future procurements, but these changes are unlikely to disconnect the buses from other systems.
Movia, Denmark's largest public transport company, operates 469 Chinese electric buses, with 262 manufactured by Yutong. The Danish agency for civil protection and emergency management has warned that the vehicles' internet connectivity and sensors could be exploited to disrupt bus operations, but notes that no specific cases of deactivation have been reported.
Yutong has maintained that it complies with applicable laws and regulations in the locations where its vehicles operate. However, critics argue that Denmark's dependence on Chinese companies poses a significant national security risk, particularly at a time when the country is trying to increase its resilience amid allegations of hybrid attacks by Russia.
"We have been way too slow" in addressing this issue, says Thomas Rohden, chair of the Danish China-Critical Society. "Denmark should not be so dependent on a country with values and ideals so different from our own," he added. The Norwegian government has declined to comment on the matter.
this is so bad 
danish gov gotta step up their game 
chinese companies are getting too cozy with our tech 
it's like, we know they're reliable but at what cost? 
our national security should be top priority 
yutong needs to do more 
danish gov is all talk no action 
469 chinese electric buses roaming around without a care 
gotta get those sim cards removed ASAP 
Just what we need - our electric buses can be hacked remotely! 
Need to get their security in gear ASAP before it's too late 
Denmark's reliance on Chinese-made electric buses is a big deal! If those Yutong buses can be remotely deactivated, it's like leaving your car keys in an unlocked car 
. What if Russia hacks into the system? It's not just about the buses themselves, but also the internet connectivity and sensors that could be exploited to disrupt operations. Denmark needs to take this seriously ASAP! 
They should've been faster to address this issue, like Thomas Rohden said 
I'm low-key freaking out about this 
with remote deactivation capabilities? What's next, having hackers take control of our entire transportation system? 
. It's like they're playing a game of chicken with our entire safety net 
. Denmark needs to take action ASAP and reassess its reliance on Chinese companies 
. We can't afford to be 'slow' on this one 
I agree that Denmark needs to take this security vulnerability seriously, but can we really say it's just about Yutong's remote access? It sounds like a classic case of a complex system with multiple vulnerabilities... what if there are other, more subtle issues at play? 
I'm not saying Denmark should cut ties with China entirely (I don't think that's practical or productive), but maybe it's time to take a closer look at our supply chain and start prioritizing more transparent, EU-based manufacturers. 
At least then we can be sure we're getting the same level of scrutiny for security...
. gotta keep an eye on dis situation 
i mean i get it china's got some amazing companies with super cool innovations but whats the point of having all that power if someone can just deactivate our buses remotely? 
anyway gotta give props to danish ppl for being aware and taking steps to fix it, hope they get it sorted out ASAP 
I don't blame the Danish government for bein' all worried about it, 'specially when there are allegations of hybrid attacks by Russia goin' on. They need to get this sorted ASAP so they can increase their resilience and keep their citizens safe. I think it's time for Denmark to start lookin' at some other manufacturers or invest in its own tech to reduce reliance on China. It's all about bein' prepared for the future, you know? 
. Maybe Denmark just wants to keep this quiet and pretend everything is fine 
? Either way, I hope they get their act together soon... we don't want any bus-related chaos 
! Like, who wants their bus to be remotely deactivated while it's running? 
. But seriously, Denmark's dependence on Chinese companies is getting sketchy 
. I mean, you'd think with all the hybrid attack stuff going around, they'd be more careful about this kinda thing 
!
. And it's not just the bus itself, but all the other systems that could be exploited too... it's like a big ol' vulnerability fest 
.